Comments (6)
biscuit
is the spec, it does not contain any implementation. biscuit-rust
is up-to-date to the spec, and biscuit-cli
exposes biscuit-rust
features, so is typically up-to-date as well.
from biscuit.
You are right, this is confusing.
Long story short, there is a gap between the actual version number present in tokens (current: 4
) and which is used in the specification, and the number used for public communication. The reason is that there was an issue with the version 3
blocks, discovered shortly after updating the spec, so we moved directly to the current version (4
). From the outside though, we went from 2.0
to 3.0
(to add to the confusion, the spec itself has a losely defined version, but libraries have their own version scheme, and can have major version bumps unrelated to the biscuit version).
This has bothered me for some time, so i think we should do something about that.
To answer your question: trust the spec and the code, current version is 4
(single numbers, no dots). If you see 3.0
(with a dot, about the spec) it refers to 4
. As for libraries themselves, their version number alone cannot tell you which version they support. The best way to know is to look at the code and the conformance suite.
from biscuit.
Thanks, @divarvel
So given the existence of biscuit-auth/biscuit-go#117, does that mean that the Go library currently only supports v2 biscuits, which means I can't use bitwise operators on biscuits because that is only possible on v4 biscuits?
from biscuit.
Indeed, biscuit-go does not support v4 blocks for now:
https://github.com/biscuit-auth/biscuit-go/blob/main/samples/samples_test.go#L144 all the samples containing v4 features are disabled in the test suite.
Adding support for bitwise operators and check all would be rather easy. The huge part is third-party blocks support.
from biscuit.
I'm not sure how I feel about releasing a version with partial support (I really don't know, it could perfectly well be okay).
I think that could be part of the discussion about versions.
from biscuit.
So which repos implement the latest spec with all features? biscuit
and by extension biscuit-cli
, but not biscuit-rust
for example?
Agreed that third-party block support in the go library would be really fantastic ;)
from biscuit.
Related Issues (20)
- Laziness of boolean operators HOT 3
- Heterogeneous `==` HOT 1
- Dates: TAI64, TAI or UTC? HOT 2
- Purpose of the `Parens` op HOT 2
- `.type()` function
- Add array and map types HOT 1
- Biscuit web key sets HOT 7
- Forgotten symbol in samples.json? HOT 2
- Webauthn signatures
- Allow heterogeneous sets
- `reject if` HOT 4
- Datalog breaking changes
- Nullability HOT 1
- Type casting / parsing operations
- Commonalities and expectations for cross-language use
- Support for lambdas
- Suggested improvement to biscuit / bwks specifications HOT 4
- Negation X2 HOT 1
- length() on strings HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from biscuit.